How we handle your data.

Sqsh ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

Information we collect

When you create an account, we collect:

• Your name and email address
• A username you choose (used so friends can find and add you)
• A profile photo or avatar emoji (optional)
• Venmo and Cash App handles (optional — stored so others can pay you after a split)

When you use the app, we collect:

• Receipt item names and prices you scan or enter manually
• Split session data: session name, participants, items claimed, tax, tip, and payment status
• Friends list (the user IDs of people you add as friends)
• A usage counter tracking how many sessions you have started (used to manage your free tier)
• A device push notification token, if you grant permission, to deliver invite alerts
• Timestamps of your last receipt scan (used for rate limiting)

Information visible to other users

Some of your data is shared with others as part of the core service:

• Your name is visible to all participants in any split session you join
• If you are the host of a session, your Venmo and Cash App handles are shown to all session participants so they can pay you
• Your username and name are searchable by other signed-in users if your profile is set to public
• When you send a friend invite, your name and profile photo are shown to the recipient

Receipt scanning

When you scan a receipt, the image is temporarily uploaded to Firebase Storage and sent to Google's Gemini AI API for item extraction. The image is deleted immediately after processing. We do not store receipt images. Only the extracted item names and prices are saved to your session.

Camera access

Camera access is requested only when you choose to scan a receipt or QR code. We do not access your camera at any other time.

Data storage

Your profile data and session history are stored in Google Firebase (Firestore). Profile photos are stored as part of your profile document. Sessions remain in our database until you delete your account. You can delete your account at any time from the Profile tab, which permanently removes your profile, payment handles, friends list, and session history.

Guest users

If you join a split as a guest without an account, only your chosen display name and emoji are stored within that session. This data is not linked to any personal account and cannot be deleted independently — it is removed when the session host deletes their account.

Subscriptions

Subscriptions are managed through the Apple App Store via RevenueCat. We do not store your payment card information. Subscription status is synced to your profile via RevenueCat webhooks. You can cancel anytime through your device's subscription settings.

Data sharing

We do not sell your data. We share data only with the following service providers, solely to operate the app:

• Google Firebase — database, authentication, and temporary file storage
• Google Gemini AI — receipt image processing (images are not retained by Google beyond the API call)
• RevenueCat — subscription and purchase management
• Vercel — web app hosting
• Apple — push notification delivery

Each of these providers has their own privacy policy governing their use of data.

Children's privacy

Sqsh is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Your rights

• Delete your account and all associated data at any time from the Profile tab
• Update your name, username, photo, and payment handles at any time from your profile
• Control whether your profile is searchable via the Privacy settings in the app
• Manage push notification permissions through your device's iOS Settings
• Request a copy of your data by contacting us at support@sqsh.app

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do. Continued use of the app after changes constitutes acceptance of the revised policy.